Summary
It was discovered that Raptor incorrectly handled memory operations when
processing certain input files. A remote attacker could possibly use this
issue to cause Raptor to crash, resulting in a denial of service. This
issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2020-25713)
It was discovered that Raptor incorrectly handled parsing certain tuples. A
remote attacker could possibly use this issue to cause Raptor to crash,
resulting in a denial of service. (CVE-2024-57822)
It was discovered that Raptor incorrectly handled parsing certain turtles.
A remote attacker could use this issue to cause Raptor to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2024-57823)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | raptor2 | 2.0.15-0ubuntu1.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | raptor2 | 2.0.15-0ubuntu4.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | raptor2 | 2.0.16-3ubuntu0.1 |
Vulnerabilities 3
-
Critical 9.3
In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parse…
-
Medium 4.0
In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquad…
-
Unscored —
A malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_c…